Transilience AI publishes skills that guide an agent through security work, from reconnaissance and infrastructure fingerprinting, such as identifying cloud providers, CDNs, DNS services and third-party SaaS integrations, to exploitation testing covering Active Directory attacks, privilege escalation and cryptanalysis. Its skills also cover bug bounty triage and submission reports, PCI Secure Software readiness assessments, and branded PDF security reports built with ReportLab. The collection stands out for connecting technical testing directly to compliance and reporting deliverables.
Communitytools
50 skills · 609 stars · MIT
Ai Threat Testing Offensive AI security testing and exploitation framework.
Api Security API security testing - GraphQL, REST API, WebSocket, and Web-LLM attack techniques.
Attack Path Stitcher Stitches confirmed single-asset findings into multi-hop attack paths across the organization.
Authenticated Session Acquisition Acquire an authenticated session THROUGH MFA/OTP on an in-scope target and emit a reusable sessio…
Authentication Authentication security testing - auth bypass, JWT attacks, OAuth flaws, password attacks, 2FA by…
Blockchain Security Smart contract security testing and blockchain CTF exploitation.
Client Side Client-side vulnerability testing - XSS (reflected/stored/DOM), CSRF, CORS misconfiguration, Clic…
Cloud Containers Cloud and container security testing - AWS, Azure, GCP, Docker, and Kubernetes misconfigurations…
Cloud Defense Detect and break the cloud post-compromise attack chain (AWS / Azure / GCP) — per-stage CloudTrai…
Coordination Pentest coordination — orchestrates executor and validator agents with context-controlled spawning.
Cryptography Cryptanalysis techniques — lattice attacks, padding oracles, weak-RNG exploitation, signature for…
Cve Poc Generator CVE research, standalone PoC script and report generation.
Cve Risk Score Retrieve CVE risk scores from NVD.
Dfir Digital forensics and incident response - Windows event log analysis, PCAP forensics, filesystem…
Essential Tools Core pentesting tools and methodology - Burp Suite usage, Playwright automation, binary analysis,…
Firewall Review Evidence-safe firewall ruleset audit reference specification — 22 documented detector patterns (1…
Generate branded pentest report PDFs in Adobe Acrobat and PdfCraft Turn your findings into a branded, client-ready PDF report, free in PdfCraft
Github Workflow GitHub workflow automation — branching, committing, pushing, pull requests, issues, and code review.
Hackerone HackerOne bug bounty automation - parses scope CSVs, deploys parallel pentesting agents per asset…
Hackthebox HackTheBox platform operations and automations to solve challenges, machines and capture the flag…
Infrastructure Network infrastructure testing - port scanning, DNS attacks, MITM, VLAN hopping, IPv6, SMB/NetBIO…
Injection Injection vulnerability testing - SQL, NoSQL, OS Command, SSTI, XXE, and LDAP/XPath injection tec…
Make Branded Threat Intel .pdf Reports, Adobe Acrobat and PdfCraft Branded A4 threat intelligence PDF reports with severity colours, code boxes and fixed layouts
Mobile Security Mobile application security testing (Android + iOS) mapped to OWASP MASVS/MASTG — static reversin…
Network Appliance Offensive Offensive testing of perimeter network appliances and VPN crypto — IKE/IPsec (aggressive-mode, tr…
Osint Open-source intelligence gathering - company repository enumeration, secret scanning, git history…
Password-protect .pdf files in Acrobat and PdfCraft One strong generated password, encrypted copies of your files, and untouched originals.
Patt Fetcher Fetches and extracts payloads from PayloadsAllTheThings on demand.
Pci Secure Software Automated PCI Secure Software Standard (SSS) v2.0 readiness gap-assessment of an application from…
Pentest Engagement Run a professional penetration engagement OR a network vulnerability scan from a scope.
Reconnaissance Domain assessment and web application mapping - subdomain discovery, port scanning, endpoint enum…
Regression Sweep Re-validates every previously-confirmed finding against its current target — detects drift (patch…
Reverse Engineering Static and dynamic reverse engineering — ELF/PE analysis, custom-VM bytecode, packed binaries, an…
Risk Prioritiser Risk-based prioritisation of confirmed attack paths.
Script Generator Generates optimized, syntax-validated scripts on demand.
Server Side Server-side vulnerability testing - SSRF, HTTP Request Smuggling, Path Traversal, File Upload, In…
Skill Prune Identify and remove negative-ROI skill content — orphan files, never-read entries, duplicates, co…
Skill Update Skill creation, update and management — generates skill directory structure, validates against be…
Social Engineering Social engineering testing - phishing, pretexting, vishing, and physical security assessment tech…
Source Code Scanning Security-focused source code review and SAST.
System System exploitation testing - Active Directory attacks, privilege escalation (Linux/Windows), and…
Techstack Backend Backend tech-stack identification — web servers, runtimes, languages, frameworks, databases, APIs…
Techstack Correlation Correlation, confidence scoring, and conflict resolution across all tech-stack signals.
Techstack Frontend Frontend tech-stack identification — JavaScript frameworks, meta-frameworks, CSS frameworks, UI l…
Techstack Identification OSINT-based technology stack identification.
Techstack Infra Infrastructure tech-stack identification — cloud providers, CDN/WAF, DNS services, TLS/CT, DevOps…
Techstack Osint OSINT-side tech-stack identification — public repositories (GitHub/GitLab), job postings & ATS, a…
Techstack Security Security-posture and third-party SaaS identification — security headers, CSP, HSTS, email auth, s…